Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ddc626ec-2479-471b-98df-9c52b49cf85f/34ca8e623a99922674ec527b983808275bf186cf.roa
File:                     34ca8e623a99922674ec527b983808275bf186cf.roa (raw, json)
Hash identifier:          QU7Q6wI2dbVZ+IYbfYxLJU0t7pR6CauYlM8+LWeJbbI=
Subject key identifier:   50:F0:30:1C:EC:5F:8C:97:90:0F:9F:8E:B0:E8:29:FE:4D:B2:34:49
Certificate issuer:       /CN=dada928f014f164e6aa671c157fde2998a0ae179
Certificate serial:       47A7
Authority key identifier: F0:01:F6:47:D9:9E:CA:FF:F0:20:0A:C1:E2:F6:22:5C:5E:BD:61:73
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dada928f014f164e6aa671c157fde2998a0ae179.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ddc626ec-2479-471b-98df-9c52b49cf85f/34ca8e623a99922674ec527b983808275bf186cf.roa
Signing time:             Wed 06 Dec 2023 12:30:41 +0000
ROA not before:           Wed 06 Dec 2023 12:30:40 +0000
ROA not after:            Sat 06 Dec 2025 12:30:40 +0000
asID:                     273138
IP address blocks:        2803:f450::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18343 (0x47a7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dada928f014f164e6aa671c157fde2998a0ae179
        Validity
            Not Before: Dec  6 12:30:40 2023 GMT
            Not After : Dec  6 12:30:40 2025 GMT
        Subject: CN=34ca8e623a99922674ec527b983808275bf186cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:35:2f:6b:13:3f:bf:c4:4d:fa:c3:f3:66:f7:
                    81:7d:7e:43:23:da:f3:35:bb:10:16:01:c3:7e:fe:
                    52:bc:d4:9b:e4:ab:6a:7e:d0:bb:b4:87:6f:12:c6:
                    58:25:44:6b:fc:6c:52:1c:c8:f7:50:63:fc:3b:98:
                    c8:a0:c9:ab:b5:91:32:5a:5e:e9:e1:5e:92:1c:e1:
                    f4:3f:04:6a:83:03:e7:10:c6:84:ae:db:49:dd:17:
                    15:75:6e:35:b4:59:40:b5:a2:2d:6d:05:0e:35:22:
                    fd:ba:3b:6c:5b:aa:ba:a2:e7:de:93:e6:eb:be:91:
                    80:8d:5d:ee:e0:aa:79:52:a6:1e:92:b9:c0:38:58:
                    fa:bd:f3:f1:43:4f:d8:92:7e:81:d7:f0:0c:4c:ca:
                    3a:13:8d:1e:50:8d:40:21:a8:30:ca:5f:27:77:2f:
                    3a:9a:d2:ad:47:9f:78:a2:e1:a4:6f:0d:39:7a:04:
                    5b:28:ce:f6:65:f3:4e:58:5b:8a:3b:c6:e2:e0:31:
                    04:c0:0a:88:ee:a9:89:75:80:2b:7a:09:ff:6a:32:
                    d3:b0:94:8f:0b:de:9a:4e:62:e5:12:b7:ba:a4:ec:
                    be:65:01:73:1a:81:d7:83:17:dc:dc:76:7e:2b:f2:
                    89:96:66:b1:ad:23:26:92:0c:f0:22:b9:e8:c6:d1:
                    61:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:F0:30:1C:EC:5F:8C:97:90:0F:9F:8E:B0:E8:29:FE:4D:B2:34:49
            X509v3 Authority Key Identifier:
                keyid:F0:01:F6:47:D9:9E:CA:FF:F0:20:0A:C1:E2:F6:22:5C:5E:BD:61:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dada928f014f164e6aa671c157fde2998a0ae179.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ddc626ec-2479-471b-98df-9c52b49cf85f/34ca8e623a99922674ec527b983808275bf186cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ddc626ec-2479-471b-98df-9c52b49cf85f/dada928f014f164e6aa671c157fde2998a0ae179.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f450::/32

    Signature Algorithm: sha256WithRSAEncryption
         3e:a6:84:f4:72:df:e0:a4:b3:60:88:d5:a0:26:cd:3c:42:cf:
         88:ac:39:46:2f:2e:61:3b:4c:70:b3:00:21:7a:c4:07:42:74:
         f2:62:2c:4f:ac:51:57:f5:62:2c:68:62:b6:13:f6:4b:52:52:
         7d:c8:f7:26:4c:76:69:7d:8d:4e:db:fa:e9:e7:a6:13:f3:35:
         38:f0:0a:45:e9:d4:d9:cc:2f:4b:fd:41:86:a1:41:af:c7:41:
         c1:76:7a:21:a2:ca:51:de:75:3d:13:b4:65:5c:5a:99:5f:6e:
         d0:bf:a9:5e:3c:db:bf:ec:2a:65:96:cf:27:7c:4a:30:17:ad:
         65:fc:38:2d:5e:54:83:0d:6a:cf:7f:be:26:4e:24:47:53:29:
         c9:5e:29:1c:71:7f:f8:4a:0d:16:d7:ff:98:14:cd:db:28:36:
         f9:a7:f1:63:ba:46:1c:ba:d7:68:10:44:5c:46:bc:2f:3f:e1:
         86:f8:25:4c:db:7c:5d:ed:87:92:c7:33:d8:08:2c:43:f2:e1:
         31:02:a9:7d:14:10:b0:9d:9b:fa:dc:c4:01:1c:d6:af:82:59:
         e0:c9:b1:ca:e6:9b:8c:4e:07:cd:5a:bb:2a:7c:34:8e:e0:74:
         a0:a0:80:9a:c2:39:f5:e2:a0:bc:36:9d:33:83:d9:72:e3:fd:
         83:d3:6c:a7
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgICR6cwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoZGFk
YTkyOGYwMTRmMTY0ZTZhYTY3MWMxNTdmZGUyOTk4YTBhZTE3OTAeFw0yMzEyMDYx
MjMwNDBaFw0yNTEyMDYxMjMwNDBaMDMxMTAvBgNVBAMTKDM0Y2E4ZTYyM2E5OTky
MjY3NGVjNTI3Yjk4MzgwODI3NWJmMTg2Y2YwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCJNS9rEz+/xE36w/Nm94F9fkMj2vM1uxAWAcN+/lK81Jvkq2p+
0Lu0h28SxlglRGv8bFIcyPdQY/w7mMigyau1kTJaXunhXpIc4fQ/BGqDA+cQxoSu
20ndFxV1bjW0WUC1oi1tBQ41Iv26O2xbqrqi596T5uu+kYCNXe7gqnlSph6SucA4
WPq98/FDT9iSfoHX8AxMyjoTjR5QjUAhqDDKXyd3Lzqa0q1Hn3ii4aRvDTl6BFso
zvZl805YW4o7xuLgMQTACojuqYl1gCt6Cf9qMtOwlI8L3ppOYuUSt7qk7L5lAXMa
gdeDF9zcdn4r8omWZrGtIyaSDPAiuejG0WEXAgMBAAGjggJcMIICWDAdBgNVHQ4E
FgQUUPAwHOxfjJeQD5+OsOgp/k2yNEkwHwYDVR0jBBgwFoAU8AH2R9meyv/wIArB
4vYiXF69YXMwDgYDVR0PAQH/BAQDAgeAMIGaBggrBgEFBQcBAQSBjTCBijCBhwYI
KwYBBQUHMAKGe3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFj
bmljLzQ4ZjA4M2JiLWY2MDMtNDg5My05OTkwLTAyODRjMDRjZWI4NS9kYWRhOTI4
ZjAxNGYxNjRlNmFhNjcxYzE1N2ZkZTI5OThhMGFlMTc5LmNlcjCBmgYIKwYBBQUH
AQsEgY0wgYowgYcGCCsGAQUFBzALhntyc3luYzovL3JlcG9zaXRvcnkubGFjbmlj
Lm5ldC9ycGtpL2xhY25pYy9kZGM2MjZlYy0yNDc5LTQ3MWItOThkZi05YzUyYjQ5
Y2Y4NWYvMzRjYThlNjIzYTk5OTIyNjc0ZWM1MjdiOTgzODA4Mjc1YmYxODZjZi5y
b2EwgY8GA1UdHwSBhzCBhDCBgaB/oH2Ge3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNu
aWMubmV0L3Jwa2kvbGFjbmljL2RkYzYyNmVjLTI0NzktNDcxYi05OGRmLTljNTJi
NDljZjg1Zi9kYWRhOTI4ZjAxNGYxNjRlNmFhNjcxYzE1N2ZkZTI5OThhMGFlMTc5
LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEw
DzANBAIAAjAHAwUAKAP0UDANBgkqhkiG9w0BAQsFAAOCAQEAPqaE9HLf4KSzYIjV
oCbNPELPiKw5Ri8uYTtMcLMAIXrEB0J08mIsT6xRV/ViLGhithP2S1JSfcj3Jkx2
aX2NTtv66eemE/M1OPAKRenU2cwvS/1BhqFBr8dBwXZ6IaLKUd51PRO0ZVxamV9u
0L+pXjzbv+wqZZbPJ3xKMBetZfw4LV5Ugw1qz3++Jk4kR1MpyV4pHHF/+EoNFtf/
mBTN2yg2+afxY7pGHLrXaBBEXEa8Lz/hhvglTNt8Xe2Hkscz2AgsQ/LhMQKpfRQQ
sJ2b+tzEARzWr4JZ4MmxyuabjE4HzVq7Knw0juB0oKCAmsI59eKgvDadM4PZcuP9
g9Nspw==
-----END CERTIFICATE-----